Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: TnHsUO+x7eT+F/7Fm7hPqmAmlxliVMHKnL4E0oJAf0A=
Subject key identifier: FB:49:4C:35:01:32:39:2F:EC:9A:B8:97:5A:6A:08:71:D4:57:F1:2D
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 019D992B1BBEF71454E55CAA289ABB4C27CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0681
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: xpfCsJs5Khd/YkVla3eMlucJKItS+Kv2vi1tYGAwZLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1b:be:f7:14:54:e5:5c:aa:28:9a:bb:4c:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=fb494c350132392fec9ab8975a6a0871d457f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:61:12:dc:03:5d:17:60:1a:68:05:f7:75:
40:b8:b8:02:3f:0e:82:0c:64:09:c2:83:2c:0b:05:
0e:b4:b7:49:bb:ad:9b:fb:82:b5:45:65:41:9c:d8:
ad:fb:7d:f4:80:b4:66:5e:81:bd:95:05:de:08:95:
56:61:95:33:9a:33:e1:86:30:72:82:f3:6c:0a:78:
6f:92:2b:61:85:2c:a6:d1:c4:01:a5:6d:54:d7:d4:
36:d0:cd:f4:c4:2a:4e:a6:1c:3e:57:61:74:3e:b0:
95:5a:2f:a2:4b:ed:b5:77:84:e6:fd:90:05:76:4b:
08:20:59:c7:0d:52:47:29:da:c9:97:e3:8f:f8:06:
4c:60:00:46:16:4c:b6:37:f5:65:ad:5f:ad:4e:a8:
d3:28:32:53:ca:42:db:85:6d:4f:32:c2:13:b5:f7:
b8:c1:75:7f:8f:ac:fa:41:db:5e:59:60:b4:d3:c5:
25:2a:3f:25:dd:c2:a0:49:23:58:23:d9:b5:2a:cf:
e9:52:c9:92:11:05:db:4b:ff:98:3f:b6:e8:3a:dd:
a7:0e:67:bb:c2:84:7f:65:93:c5:74:2b:9b:d8:c4:
94:7b:3c:f1:94:9d:f1:94:7f:d0:3a:90:19:15:19:
17:41:1b:11:a6:02:37:5b:64:f4:91:48:4f:00:93:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:49:4C:35:01:32:39:2F:EC:9A:B8:97:5A:6A:08:71:D4:57:F1:2D
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cb:15:2e:b1:48:67:f1:0c:f0:c4:37:0a:51:23:80:ca:07:
69:ef:f2:7c:70:ac:5a:27:55:5e:4a:cf:c0:1d:d0:27:96:a4:
37:3d:77:4f:d0:d4:78:5b:5a:c9:e1:95:86:a8:cc:3e:89:41:
d3:21:c4:3a:a8:46:6b:65:98:65:c0:8c:53:d3:72:49:50:06:
35:8c:c9:9e:7e:66:13:e4:c1:0c:14:db:e9:86:b3:03:1b:32:
75:40:ec:6c:ba:0c:a2:82:1c:3e:a5:d2:c0:30:ef:46:6e:6b:
3b:09:18:56:85:df:f7:7f:1c:21:0e:6a:40:20:8a:42:c4:1b:
a2:a5:66:f1:4a:a3:60:89:24:de:e8:4f:69:5a:ac:e5:50:b6:
aa:eb:93:7f:cb:ba:15:87:15:d7:7a:f4:80:88:f4:f1:e3:e6:
7f:36:c9:f9:1c:ee:df:89:08:7b:38:fb:b3:69:8f:c8:06:bd:
89:4d:e7:fd:76:dd:8c:36:b5:89:7a:6d:d3:11:bc:55:54:83:
1a:58:70:08:2d:79:95:bd:72:c4:c3:68:b9:65:e9:ed:7f:2a:
88:f4:a4:2c:a1:d3:06:fc:fa:a9:2a:29:48:38:0b:07:d7:72:
3f:43:f5:58:e1:41:de:a8:28:ee:4c:66:87:c0:43:f5:8d:1b:
39:d1:6c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKxu+9xRU5VyqKJq7TCfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGM4YzYyMzkxZWZkZDRkZDE4ZTQ2ODE5ZTE3NzgwMDJh
OWExODcwHhcNMjYwNDE3MDIwMDMyWhcNMjYwNDE4MDIwMDMyWjAzMTEwLwYDVQQD
EyhmYjQ5NGMzNTAxMzIzOTJmZWM5YWI4OTc1YTZhMDg3MWQ0NTdmMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf5hEtwDXRdgGmgF93VAuLgCPw6C
DGQJwoMsCwUOtLdJu62b+4K1RWVBnNit+330gLRmXoG9lQXeCJVWYZUzmjPhhjBy
gvNsCnhvkithhSym0cQBpW1U19Q20M30xCpOphw+V2F0PrCVWi+iS+21d4Tm/ZAF
dksIIFnHDVJHKdrJl+OP+AZMYABGFky2N/VlrV+tTqjTKDJTykLbhW1PMsITtfe4
wXV/j6z6QdteWWC008UlKj8l3cKgSSNYI9m1Ks/pUsmSEQXbS/+YP7boOt2nDme7
woR/ZZPFdCub2MSUezzxlJ3xlH/QOpAZFRkXQRsRpgI3W2T0kUhPAJOhZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtJTDUBMjkv7Jq4l1pqCHHUV/EtMB8GA1UdIwQY
MBaAFAPcjGI5Hv3U3RjkaBnhd4ACqaGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMt
MGVmOGMwMzZiNjE2LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMtMGVmOGMwMzZiNjE2
LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8sVLrFI
Z/EM8MQ3ClEjgMoHae/yfHCsWidVXkrPwB3QJ5akNz13T9DUeFtayeGVhqjMPolB
0yHEOqhGa2WYZcCMU9NySVAGNYzJnn5mE+TBDBTb6YazAxsydUDsbLoMooIcPqXS
wDDvRm5rOwkYVoXf938cIQ5qQCCKQsQboqVm8UqjYIkk3uhPaVqs5VC2quuTf8u6
FYcV13r0gIj08ePmfzbJ+Rzu34kIezj7s2mPyAa9iU3n/XbdjDa1iXpt0xG8VVSD
GlhwCC15lb1yxMNouWXp7X8qiPSkLKHTBvz6qSopSDgLB9dyP0P1WOFB3qgo7kxm
h8BD9Y0bOdFsUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:05 2026 by rpki-client